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ADDRESS CONVERSION 
APPARATUS, MONITORING 
APPARATUS, AND COMPUTER- 
READABLE MEDIUM STORING A 
PROGRAM THEREOF 

Cross Reference to Related Applications 

This patent application claims priority from a Japanese patent application, No. 2001- 
263999 filed on August 31 , 2001, the contents of which are incorporated herein by 
reference. 

Background of Invention 
Field of the Invention 

[0001] The present invention relates to an address conversion apparatus, a monitoring 
apparatus and a computer-readable medium storing a program thereof. More 
particularly, the present invention relates to processing an SNMP trap from a 
communication apparatus in a computer network to generate another SNMP trap 
thereof such that the communication apparatus can be identified by a network 
communication monitoring apparatus. 

Description of the Related Art 

[0002] SNMP (simple network management protocol) is widely used to manage a 

communication apparatus, such as a computer, a router, or a hub, on a network by a 
management apparatus connected to the network. In an SNMP-based system, the 
communication apparatus transmits an SNMP trap to a monitoring apparatus when a 
specific event occurs and thereby can notify that the event has occurred. The event 
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may be, for example, ON/OFF of a power supply, failure information, or information of 
detection of a predetermined specified status. 

[0003] In Japanese patent application Laid-Open No. 2000-59385, when plural systems 
are managed by a single manager, proxy management apparatuses are provided 
between the systems and a monitoring apparatus. A system ID of a system to be 
specified is added to communication between the proxy management apparatuses 
and the monitoring apparatus. Accordingly, the managing apparatus can specify and 
identify each system even when IP addresses overlap among the systems. 

[0004] In the aforementioned Japanese patent application, since the system ID is added 
to an SNMP trap, it is required to convert the SNMP packet by adding a new field or 
part on the SNMP packet. When a LAN and a WAN are connected by using an address 
conversion apparatus, such as a router, it is preferable that conversion process of a 
packet be simplified to reduce protocol processing overhead and to reduce the 
amount of the system hardware. 

Summary of Invention 

[0005] Therefore, it is an object of the present invention to provide an address 

conversion apparatus, a monitoring apparatus and a computer-readable medium 
storing a program thereof, which are capable of overcoming the above drawbacks 
accompanying the conventional art. The above and other objects can be achieved by 
combinations described in the independent claims. The dependent claims define 
further advantageous and exemplary combinations of the present invention. 

[0006] According to the present invention, an address conversion apparatus for 

connecting a first network to a second network, includes: a receiving unit that receives 
a first SNMP trap from a communication apparatus in the first network; a converter 
that changes a predetermined part in the first trap to generate a second SNMP trap; 
and a transmitting unit that transmits the second trap generated by the converter to a 
monitoring apparatus of the communication apparatus in the second network. 

[0007] In an aspect of the present invention, the converter changes the predetermined 
part of an agent address part in the first trap to a value corresponding to an address 
in the second network to generate the second SNMP trap. 



AppJDD=09683100 



page 2 



[0008] In another aspect of the present invention, the converter changes the 

predetermined part of a time stamp part in the first trap to information for identifying 
the communication apparatus in the first network to generate the second trap. 

[0009] In still another aspect of the present invention, the converter changes the 

predetermined part of a port number in the first trap to information for identifying the 
communication apparatus in the first network to generate the second trap. 

[0010] In still another aspect of the present invention, the converter changes the 
predetermined part in the first trap to information for identifying the address 
conversion apparatus to generate the second SNMP trap. 

[001 1] In still another aspect of the present invention, the converter changes the 
predetermined part of a time stamp part in the first trap to the information for 
identifying the address conversion apparatus to generate the second trap. 

[001 2] In still another aspect of the present invention, the converter changes the 

predetermined part of a port number in the first trap to the information for identifying 
the address conversion apparatus to generate the second trap. 

[001 3] According to the present invention, an address conversion apparatus for 

connecting a first network to a second network, includes: a receiving unit that receives 
a first SNMP trap from a communication apparatus in the first network; a holding unit 
that holds the first trap; a transmitting unit that transmits a second SNMP trap based 
on the first SNMP trap to a monitoring apparatus of the communication apparatus in 
the second network; and a reading unit that reads the first trap from the holding unit 
in response to a read request of the first trap, corresponding to the second trap, from 
the monitoring apparatus, and transmits the first trap to the monitoring apparatus. 

[0014] According to the present invention, an address conversion apparatus for 

connecting a first network to a second network, includes: an address management 
unit that manages one or more addresses allocated to the address conversion 
apparatus; a receiving unit that receives a first SNMP trap from a communication 
apparatus in the first network; a holding unit that holds the first trap; a converter that 
changes an agent address part in the first trap to one of the one or more addresses 
managed by the address management unit to generate a second SNMP trap; and a 
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transmitting unit that transmits the second trap generated by the converter to a 
monitoring apparatus in the second network, in which the address management unit 
sets a status of the one of the one or more addresses to generate the second trap to 
"in use", and when a status of each of the one or more addresses managed by the 
address management unit is "in use", the converter does not generate the second trap. 

[001 5] In another aspect of the present invention, the address management unit receives, 
from the monitoring apparatus, trap processing completion information for setting 
the "in use" status of the one or more addresses to "no use", and sets the status of the 
one or more addresses specified by the trap processing completion information to "no 
use". 

[0016] In still another aspect of the present invention, after the status of the one or more 
addresses is set to "in use", the address management unit detects a previously 
specified passage of time and sets the "in use" status of the one or more addresses to 
"no use". 

[001 7] In still another aspect of the present invention, the address management unit 
obtains an agent address from the first trap received from the communication 
apparatus in the first network, and records correspondence of the agent address to 
the one of the one or more addresses to generate the second trap, and the address 
conversion apparatus further includes: an inverter that changes a destination address 
of a first packet from the monitoring apparatus to the agent address, when the 
destination address of the first packet from the monitoring apparatus is the one of the 
one or more addresses managed by the address management unit, to generate a 
second packet; and a transfer unit that transfers the second packet to the 
communication apparatus in the first network. 

[001 8] According to the present invention, a monitoring apparatus receiving an SNMP 

trap transmitted by a communication apparatus via an address conversion apparatus, 
wherein the monitoring apparatus includes a specifying unit that specifies the 
communication apparatus based on an agent address part and a time stamp part in 
the trap. 



[0019] 



According to the present invention, a monitoring apparatus receiving an SNMP 
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trap transmitted by a communication apparatus via an address conversion apparatus, 
wherein the monitoring apparatus includes a specifying unit that specifies the 
communication apparatus based on an agent address part and a port number in the 
trap. 

[0020] According to the present invention, a monitoring apparatus receiving a generated 
SNMP trap from an address conversion apparatus, connecting a first network to a 
second network, which receives an SNMP trap from a communication apparatus in the 
first network, holds the trap, and transmits the generated trap, the monitoring 
apparatus includes: a receiving unit that receives the generated trap; and a 
transmitting unit that transmits a request to the address conversion apparatus to read 
the trap corresponding to the generated trap from the address conversion apparatus. 

Jp[ [0021] According to the present invention, a computer-readable medium storing an 

^ address conversion program for a computer connecting a first network to a second 

Ly network, the program includes: a receiving module that directs the computer to 

Si receive a first SNMP trap from a communication apparatus in the first network; a 

P conversion module that directs the computer to change a predetermined part in the 

first trap to generate a second SNMP trap; and a transmitting module that directs the 

f " computer to transmit the second trap generated by the computer to a monitoring 

yQ apparatus of the communication apparatus in the second network. 

^ [0022] According to the present invention, a computer-readable medium storing a 
program for a monitoring apparatus that receives an SNMP trap transmitted by a 
communication apparatus via an address conversion apparatus, wherein the program 
comprises a specifying module that is operable to make the monitoring apparatus 
specify the communication apparatus based on an agent address part and a time 
stamp part in the trap. 

[0023] According to the present invention, a computer-readable medium storing a 
program for a monitoring apparatus that receives an SNMP trap transmitted by a 
communication apparatus via an address conversion apparatus, wherein the program 
comprises a specifying module that is operable to make the monitoring apparatus 
specify the communication apparatus based on an agent address part and a port 
number in the trap. 
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[0024] This summary of the present invention does not necessarily describe all necessary 
features so that the invention may also be a sub-combination of these described 
features. 

Brief Description of Drawings 

[0025] Fig. 1 is a schematic depiction of one example of a communication system 1 00 in 
a first embodiment according to the present invention. 

[0026] Fig. 2 shows schematically components in an address conversion apparatus 1 30a 
of the first embodiment in the present invention. 

[0027] Fig. 3 is a schematic representation showing components in a monitoring 
apparatus 1 50 of the first embodiment in the present invention. 

[0028] Fig. 4 is a diagram of an SNMPtrap according to the first embodiment in the 
present invention. 

[0029] Figs. 5A-C show changes to an SNMP trap by a converter 2 1 0 of the first 
embodiment in the present invention. 

[0030] Figs. 6A-B shows other changes to the SNMP trap by the converter 2 1 0 of the first 
embodiment in the present invention. 

[0031] Fig. 7 shows schematically components in the address conversion apparatus 1 30a 
in a second embodiment of the present invention. 

[0032] Fig. 8 is a flowchart of a trap transfer processing according to the second 
embodiment in the present invention. 

[0033] Fig. 9 shows schematically components in the address conversion apparatus 1 30a 
in a third embodiment of the present invention. 

[0034] Fig. 1 0 shows one example of an address conversion table 945 according to the 
third embodiment in the present invention. 

[0035] Fig. 11 is a flowchart of a trap processing in the address conversion apparatus 
1 30a according to the third embodiment in the present invention. 
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[0036] Fig. 1 2 is a schematic depiction of one example of hardware components of the 
address conversion apparatus 1 30a or the monitoring apparatus 1 50 in a fourth 
embodiment of the present invention. 

Detailed Description 

[0037] The invention will now be described based on preferred embodiments, which do 
not intend to limit the scope of the present invention, but rather to exemplify the 
invention. All of the features and the combinations thereof described in the 
embodiments are not necessarily essential to the invention. 

[0038] (First embodiment)Fig. 1 shows one example of communication system 100 in a 
first embodiment of the present invention. Communication system 100 of the present 
embodiment includes terminals 1 1 0a, 1 1 0b, 11 0c, and 1 1 Od, LANs 1 20a and 1 20b, 
address conversion apparatuses 1 30a and 130b, WAN 140 and monitoring apparatus 
150. 

[0039] Terminals 11 Oa to 11 Od are one example of a communication apparatus 

according to the present invention. The communication apparatus of the present 
invention may be a communication apparatus having communication functions, such 
as a server, a hub, a bridge, a router, a gateway, other than the terminals 11 Oa to 
110d. 

[0040] Terminals 1 1 Oa to 1 1 Od transmit an SNMP trap to monitoring apparatus 1 50 when 
a specific event occurs in the terminals and inform that the event has occurred. The 
event is, for example, ON/OFF of a power supply, failure information, or information 
of detection of a predetermined status. 

[0041] LAN 120a is a LAN (local area network) to connect terminals 1 10a to 1 10b to 

address conversion apparatus 1 30a. LAN 1 20b is a LAN to connect terminals 1 1 0c to 
110d to address conversion apparatus 130b. Local IP address "192.168.11.*" is 
allocated to LAN 120a and LAN 120b of the present embodiment. In LAN 120a, local 
IP address "192.168.11.1" is allocated to terminal 110a and local IP address 
"1 92.1 68.1 1 .2" is allocated to terminal 1 1 0b. In LAN 1 20b, local IP address 
"192.1 68.1 1.1" is allocated to terminal 1 10c and local IP address "192.168.1 1.2" is 
allocated to terminal 1 1 Od. 
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[0042] Address conversion apparatuses 1 30a to 1 30b are routers having a NAT (network 
address translator) function as one example of an address conversion function. The 
address conversion apparatus of the present invention may be a server, a bridge, a 
router, a gateway, or a NAT box. 

[0043] Address conversion apparatuses 1 30a and 1 30b respectively connect LANs 120a 
and 120b, which are one example of a first network in the present invention, to WAN 
1 40, which is one example of a second network in the present invention. In the 
present embodiment, since address conversion apparatuses 1 30a and 1 30b have the 
same constitution, address conversion apparatus 1 30a will mainly be described 
hereinafter. 

[0044] WAN 1 40 is a WAN (wide area network) to connect address conversion apparatuses 
1 30a to 1 30b to monitoring apparatus 1 50. In WAN 1 40 of the present embodiment, 
global IP address "205.177.129.1" is allocated to address conversion apparatus 130a, 
global IP address "205.177.1 30.1" is allocated to address conversion apparatus 1 30b, 
and global IP address "205.1 77.1 31 .2" is allocated to monitoring apparatus 1 50. 

[0045] Monitoring apparatus 1 50 monitors the status of terminals 1 1 0a to 1 1 Od by 
receiving traps transmitted by terminals 1 1 0a to 1 1 Od via address conversion 



M* apparatus 1 30a or address conversion 1 30b. Monitoring apparatus 1 50 may transmit 



a management message based on SNMP to terminals 1 1 0a to 11 Od in accordance with 
a trap received from one of the terminals 1 1 0a to 11 Od. 

[0046] Fig. 2 shows address conversion apparatus 130a including local receiving unit 
200, converter 210, global transmitting unit 220, global receiving unit 250, inverter 
260 and local transmitting unit 270. Local receiving unit 200 is one example of a 
receiving unit in address conversion apparatus 130a of the present invention. Global 
transmitting unit 220 is one example of a transmitting unit in address conversion 
apparatus 1 30a in the present invention. 



[0047] 



Local receiving unit 200 receives a first trap from terminals 1 1 0a to 1 1 0b, which 
are communication apparatuses in LAN 1 20a. Converter 210 changes a predetermined 
part of the first trap received by local receiving unit 200 to generate a second trap. 
Converter 210 generates the second trap in order that monitoring apparatus 1 50 can 
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specify the terminal 1 1 Oa or 1 1 Ob from which the first trap is transmitted. 

[0048] Global transmitting unit 220 transmits the second trap generated by converter 
210 to monitoring apparatus 1 50 on WAN 140. Global receiving unit 250 receives a 
management message transmitted by monitoring apparatus 1 50 to terminal 1 10a or 
terminal 1 1 Ob having transmitted the first trap. Inverter 260 converts a management 
message destination IP address received by global receiving unit 250 into a local IP 
address of terminal 1 1 Oa or terminal 1 1 Ob having transmitted the first trap. Local 
transmitting unit 270 transmits the management message converted by inverter 260, 
via LAN 1 20a, to terminal 1 1 Oa or terminal 1 1 Ob having transmitted the first trap. 

[0049] Address conversion apparatus 1 30a may use, for example, the SET REQUEST 
message or the GET REQUEST message based on SNMP as the aforementioned 
management message. 

[0050] Fig. 3 shows monitoring apparatus 1 50 having global receiving unit 300, 

specifying unit 310, trap processor 320 and global transmitting unit 330. Global 
receiving unit 300 is one example of a receiving unit in monitoring apparatus 1 50 in 
the present invention. Global transmitting unit 330 is one example of a transmitting 
unit in monitoring apparatus 1 50 in the present invention. 

[0051] Global receiving unit 300 receives the second trap transmitted by address 

conversion apparatus 1 30a or address conversion apparatus 130b, which received the 
first trap transmitted by terminals 110a to llOd. Specifying unit 310 analyzes the 
second trap received by global receiving unit 300 and specifies a communication 
apparatus having transmitted the corresponding first trap. Trap processor 320 
processes the second trap, which corresponds to the first trap, and notifies a user of 
monitoring apparatus 1 50 of a content of the first trap, which was transmitted from 
any communication apparatus of terminals 11 0a to 1 1 Od; updates information with 
respect to the status of each of the terminals 1 1 0a to 1 1 Od stored in trap processor 
320; or generates a management message to instruct an operation corresponding to 
the first trap. Global transmitting unit 330 transmits the management message 
generated by trap processor 320 to the communication apparatus of terminals 1 10a 
to 1 1 Od having transmitted the trap. 



App_ID=09683100 



page 



[0052] Monitoring apparatus 1 50 may use the SET REQUEST message or the GET REQUEST 
message based on SNMP as the aforementioned management message. 

[0053] Fig. 4 is a diagram of a trap according to the first embodiment in the present 
invention. The trap of the present embodiment has source port number 400, 
destination port number 405, packet length 41 0, check sum 41 5, version number part 
420, community name part 425, PDU type part 427, PDU length part 428, enterprise 
ID part 430, agent address part 435, generic trap part 440, specific trap part 445, 
time stamp part 450 and variable bindings part 455. 

[0054] Source port number 400, destination port number 405, packet length 41 0 and 
check sum 41 5 are UDP (user data gram protocol) headers to transfer an SNMP trap. 
Source port number 400 is a port number to be used when terminals 1 1 0a to 1 1 Od 
transmit traps. Most communication apparatuses use 1 61 as source port number 400 
in transmission of an SNMP trap. Destination port number 405 is a port number that is 
the destination of a trap. A monitoring apparatus generally uses 1 62 as the 
destination port number 405. Packet length 410 is a packet length of a trap. Check 
sum 41 5 is a check sum of a packet that is added to provide reliability of a trap's data. 

[0055] Version number part 420, community name part 425, PDU type part 427, PDU 
length part 428, enterprise ID part 430, agent address part 435, generic trap part 
440, specific trap part 445, time stamp part 450, and variable bindings part 455 are 
data of an SNMP trap. Version number part 420 is an SNMP version number. 
Community name part 425 is a community name. 

[0056] pDU part 427j pDU | ength part 428j enterprise ID part 430, agent address 
part 435, generic trap part 440, specific trap part 445, time stamp part 450, and 
variable bindings part 455 are a PDU (protocol data unit) showing a content of an 
SNMP trap. PDU type part 427 is a type of the PDU and holds an identifier that 
identifies that the PDU is a trap. PDU length part 428 is the length of the PDU. 
Enterprise ID part 430 contains an identifier showing a type of the communication 
apparatus having transmitted the trap. Agent address part 435 contains an IP address 
of the communication apparatus having transmitted the trap. Each of terminals 1 10a 
to 1 1 Od records a local IP address of the communication apparatus in agent address 
part 435 of a trap to transmit the local IP address as the first trap. Generic trap part 
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440 is an identifier showing a type of a generic trap. 

[0057] Specific trap part 445 is an identifier showing a type of a trap that is defined by 
the manufacturer of the communication apparatus having transmitted the trap. Time 
stamp part 450 is the time when an event corresponding to the trap occurred in the 
communication apparatus having transmitted the trap, i.e., a time tick. Time stamp 
part 450 of the present embodiment contains the time when the event occurred per 
1/100 seconds. Variable bindings part 455 contains a list of an OID (object ID) and it T s 
value, which is a parameter in the communication apparatus relating to the trap. 

[0058] Figs. 5A-C show changes to a trap by converter 21 0 in address conversion 
apparatus 130a of the first embodiment in the present invention. 

[0059] Terminals 1 1 0a to 1 1 0b transmit value 1 62 as the destination port number 405 
with the first trap, and transmit the first trap with the local IP address of the 
transmitting communication apparatus in agent address part 435 to monitoring 
apparatus 1 50. In Figs. 5A-C, converter 210 in address conversion apparatus 130a 
changes the first trap so that a global IP address of address conversion apparatus 
130a, which is information for identifying address conversion apparatus 130a in WAN 
140, and a lower 1 byte of the local IP address, which is information for identifying 
terminal 1 1 0a or terminal 1 1 0b in LAN 1 20a, are included in the second trap. 
Specifying unit 310 in monitoring apparatus 1 50 can specify a transmission source of 
the first trap based on the second trap. 

[0060] When address conversion apparatuses 1 30a to 1 30b do not change a trap 

transmitted by a terminal, monitoring apparatus 1 50 can not specify the transmission 
source of the trap. That is, agent address part 435 in a first trap transmitted by 
terminal 1 1 0b is "1 92.1 68.1 1 .2", which is its local IP address in LAN 1 20a. Agent 
address part 435 in a first trap transmitted by terminal 1 lOd is also "1 92.168.1 1 .2", 
which is its local IP address in LAN 120b. When address conversion apparatuses 1 30a 
and 1 30b transmit the trap to monitoring apparatus 1 50 without change to the first 
trap, monitoring apparatus 1 50 can not specify whether the associated event occurred 
at terminal 1 1 0b or terminal 1 1 Od based on the original trap. 



[0061] 



In Fig. 5A, converter 210 in the address conversion apparatus 130a changes a 
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value for the upper three bytes in agent address part 435 of the first trap to a value 
corresponding to the global IP address of the address conversion apparatus 1 30a in 
WAN 1 40 and the changed value is the value of the upper three bytes in agent address 
part 435 of the second trap. Converter 210 copies a lower one byte in agent address 
part 435 of the first trap to a lower one byte in agent address part 435 of the second 
trap. Thereby, converter 210 can include information for identifying address 
conversion apparatus 1 30a in WAN 1 40 and information for identifying terminal 1 1 0a 
or terminal 1 1 0b in LAN 1 20a in the second trap. Therefore, specifying unit 31 0 in 
monitoring apparatus 1 50 can specify the transmission source of the first trap based 
on agent address part 435 of the second trap. 

[0062] In particular, converter 210 changes each of the first traps transmitted by 
terminals 1 1 0a to 1 1 Od to corresponding second traps respectively having 
"205.1 77.1 29.1 " 205.1 77.1 29. 2", "205.1 77.1 30.1 and " 205.1 77.1 30. 2" as agent 
address part 435. Therefore, specifying unit 310 in monitoring apparatus 1 50 can 
specify the communication apparatus having transmitted the first trap based on the 
second trap. 

[0063] Converter 210 in address conversion apparatus 1 30a in the case shown in Fig. 5A 
changes a predetermined part of agent address part 435 in the first trap to a value 
corresponding to an address in WAN 1 40 to generate the second trap. 



N s [0064] In Fig. 5B, converter 21 0 in address conversion apparatus 1 30a changes agent 
address part 435 of the first trap to a value corresponding to a global IP address on 
WAN 140 and the changed agent address part 435 is agent address part 435 of the 
second trap. Converter 210 copies the lower one byte in agent address part 435 of the 
first trap to a lower one byte in time stamp part 450 of the second trap. Thereby, 
converter 210 can include information for identifying address conversion apparatus 
1 30a in WAN 1 40 and information for identifying terminal 1 1 0a or terminal 1 1 0b in 
LAN 120a in the second trap. Therefore, specifying unit 310 in monitoring apparatus 
1 50 can specify the transmission source of the first trap based on agent address part 
435 and time stamp part 450 of the second trap. 

[0065] | n particular, converter 210 changes a combination of agent address part 435 and 
a lower part of time stamp part 450 in the first traps transmitted by terminals 110a to 
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11 Od to "205.1 77.1 29.1,1", "205.1 77.1 29.1 ,2", " 205.1 77.1 30.1 ,1 and " 
205.1 77.1 30.1 ,2", respectively, in the corresponding second traps. Therefore, 
specifying unit 310 in monitoring apparatus 150 can specify the communication 
apparatus having transmitted the first trap based on the second trap. 

[0066] Converter 21 0 in address conversion apparatus 1 30a in the case shown in Fig. 5B 
changes a predetermined part of time stamp part 450 in the first trap to information 
for identifying the transmitting communication apparatus in LAN 1 20a to generate the 
second trap. Specifying unit 310 in monitoring apparatus 150 specifies the 
communication apparatus having transmitted the first trap based on agent address 
part 435 and time stamp part 450 in the second trap. 

[0067] In Fig. 5C, converter 21 0 in address conversion apparatus 1 30a changes agent 
address part 43 5 of the first trap to a value corresponding to a global IP address on 
WAN 140 and the changed agent address part 435 is agent address part 435 of the 
second trap. Converter 210 adds the lower one byte in agent address part 435 and 
destination port number 405 of the first trap, and the added value is destination port 
number 405 in the second trap. Thereby, converter 210 can include information for 
identifying address conversion apparatus 130a in WAN 140 and information for 
identifying terminal 1 1 Oa or terminal 1 1 Ob in LAN 1 20a in the second trap. Therefore, 
specifying unit 310 in monitoring apparatus 150 can specify the transmission source 
of the first trap based on destination port number 405 and agent address part 435 of 
the second trap. 

[0068] In particular, converter 210 changes a combination of agent address part 435 and 
destination port number 405 in the first traps transmitted by terminals 11 Oa to 1 1 Od 
to "205.1 77.1 29.1 ,1 63", "205.1 77.1 29.1 ,1 64", " 205.1 77.1 30.1 ,1 63", and " 
205.1 77.1 30.1 ,164", respectively, in the corresponding second traps. Therefore, 
specifying unit 310 in monitoring apparatus 150 can specify the communication 
apparatus having transmitted the first trap based on the second trap. 

[0069] Converter 210 in address conversion apparatus 1 30a in the case of Fig. 5C 
changes a predetermined part of destination port number 405 of the first trap to 
information to specify the transmitting communication apparatus in LAN 1 20a to 
generate the second trap. Specifying unit 310 in monitoring apparatus 1 50 specifies 
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the transmitting communication apparatus based on agent address part 435 and 
destination port number 405 in the second trap. 

[0070] The trap changes of Figs. 5A to 5C as aforementioned can be applied regardless 
of an IP address value or upper/lower byte width according to the present 
embodiment. 

[0071] A trap change that combines the trap changes of Figs. 5A to 5C also may be used 
for converter 210 and specifying unit 310. Converter 210 in address conversion 
apparatus 130a may include information for identifying terminal 1 10a or terminal 
1 10b in LAN 120a in each one of a lower part of agent address part 435, a lower part 
of time stamp part 450, and destination port number 405. 

[0072] When converter 210 includes the lower part of agent address part 435 of the first 
trap in agent address part 435 or time stamp part 450 of the second trap, converter 
21 0 may include the lower part thereof in a quotient or a remainder part obtained 
from a preset number in address conversion apparatus 1 30a or 1 30b and monitoring 
apparatus 1 50. For example, when five communication apparatuses are connected to 
LAN 1 20a, the lower part of agent address part 435 of the first trap may be included 
in the surplus part of agent address part 435 or time stamp part 450 divided by 5. 

[0073] Figs. 6A-B show other trap changes by converter 21 0 in address conversion 
apparatus 130a of the first embodiment in the present invention. 

[0074] Terminals 1 1 0a to 1 1 0b transmit value 1 62 as destination port number 405 of the 
first trap, and transmit the first trap with the local IP address of the transmitting 
communication apparatus in agent address part 435 to monitoring apparatus 1 50. In 
Figs. 6A-B, converter 21 0 in the address conversion apparatus 1 30a changes the first 
trap so that an identifier of address conversion apparatus 1 30a, which is information 
for identifying address conversion apparatus 1 30a in WAN 140, and a local IP address, 
which is information for identifying terminal 1 1 0a or terminal 1 1 0b in LAN 1 20a, are 
included in the second trap. Specifying unit 310 in monitoring apparatus 150 can 
specify the source of the first trap transmission based on the second trap. 

[0075] | n Fig. 6A, converter 21 0 in address conversion apparatus 1 30a uses agent 
address part 435 of the first trap as agent address part 435 of the second trap. 
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Converter 210 changes the lower one byte in time stamp part 450 of the first trap to 
"1", which is an identifier for monitoring apparatus 1 30a to identify address 
conversion apparatus 1 30a and the changed value is time stamp part 450 of the 
second trap. Converter 210 can include information for identifying address conversion 
apparatus 130a in WAN 140 and information for identifying terminal 1 10a or terminal 
110b in LAN 120a in the second trap. Specifying unit 310 in monitoring apparatus 
1 50 can specify the source of the first trap transmission based on agent address part 
435 and time stamp part 450 of the second trap. 

[0076] Converter 21 0 in address conversion apparatus 1 30a in the case of Fig. 6A 

changes the predetermined part of time stamp part 450 in the first trap to information 
for identifying address conversion apparatus 1 30a to generate the second trap. 

up [0077] In Fig. 6B, converter 210 in address conversion apparatus 1 30a uses agent 

J5i address part 435 of the first trap as agent address part 435 of the second trap, 

to Converter 210 adds "1", which is the identifier for monitoring apparatus 1 50 to 

p identify address conversion apparatus 1 30a, to destination port number 405 of the 

^ r first trap, and the added value is destination port number 405 of the second trap. 

N 3 Thereby, converter 210 can include information for identifying address conversion 

y apparatus 1 30a in WAN 1 40 and information for identifying terminal 1 1 0a or terminal 

A 1 1 Ob in LAN 1 20a in the second trap. Therefore, specifying unit 3 1 0 in monitoring 

O 

y s apparatus 1 50 can specify the transmission source of the first trap based on 

destination port number 405 and agent address part 435 of the second trap. 

[0078] Converter 2 1 0 in address conversion apparatus 1 30a in the case of Fig. 6B 
changes a predetermined part of destination port number 405 in the first trap to 
information for identifying address conversion apparatus 1 30a to generate the second 
trap. 

[0079] The trap changes of Figs. 6A and 6B as aforementioned can be applied regardless 
of an IP address value or IP address upper/lower byte width according to the present 
embodiment. 

[0080] 

Combinations of the trap changes of Figs. 6A and 6B may be used for converter 
210 and specifying unit 31 0. In converter 21 0 in address conversion apparatus 130a, 
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identifiers for monitoring apparatus 1 50 to identify address conversion apparatus 
1 30a may be included in each one of the lower part of time stamp part 450 and 
destination port number 405. 

[0081] When the identifier of address conversion apparatus 130a is included in, for 

example, time stamp part 450, converter 210 may include the identifier in a quotient 
or a remainder part of a preset number in address conversion apparatus 1 30a or 1 30b 
and monitoring apparatus 150. In particular, when five address conversion 
apparatuses are connected to WAN 140, the identifier of address conversion 
apparatus 130a may be included in the surplus part of time stamp part 450 divided by 
5. 

[0082] Any of the trap changes shown in Figs. 5A to 5C or Figs. 6A to 6B may be used for 
converter 210 of the present embodiment and monitoring apparatus 1 50 can specify 
the source of the first trap transmission. 

[0083] According to the present embodiment, converter 21 0 in address conversion 
apparatuses 1 30a to 1 30b converts the first trap into the second trap. Thereby, 
monitoring apparatus 1 50 can specify the communication apparatus having 
transmitted the first trap. Since the second trap is also a trap and only a part of the 
first trap is changed, a change of packet length is not necessary and packet 
conversion processing can easily be realized. 

[0084] (Second embodiment)Fig. 7 shows address conversion apparatus 1 30a in a second 
embodiment of the present invention including local receiving unit 200, converter 
210, global transmitting unit 220, global receiving unit 250, inverter 260, local 
transmitting unit 270, holding unit 780 and reading unit 790. Local receiving unit 200 
is one example of a receiving unit in address conversion apparatus 130a in the 
present embodiment. Global transmitting unit 220 is one example of a transmitting 
unit in address conversion apparatus 130a in the present embodiment. Reading unit 
790 and global transmitting unit 220 are one example of a reading unit in address 
conversion apparatus 130a of the present embodiment. 

[0085] Local receiving unit 200 receives a first trap, which is an SNMP trap, from 
terminals 1 1 0a to 1 1 0b, which are communication apparatuses on LAN 1 20a. 
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[0086] Converter 210 changes a predetermined part of the first trap received by local 

receiving unit 200 to generate a second trap. Converter 21 0 generates the second trap 
in order that monitoring apparatus 1 50 can specify address conversion apparatus 
1 30a transmitting the second trap. As one example, in the present embodiment 
converter 210 changes agent address part 435 of the first trap to the global IP 
address of address conversion apparatus 1 30a to generate the second trap. 

Holding unit 780 holds the first trap received by local receiving unit 200. Global 
transmitting unit 220 transmits the second trap generated by converter 21 0 to 
monitoring apparatus 1 50 on WAN 140. Global receiving unit 250 receives a read 
request of the first trap transmitted by monitoring apparatus 1 50 when monitoring 
apparatus 1 50 receives the second trap and a management message transmitted by 
monitoring apparatus 1 50 to terminal 1 1 0a or terminal 1 1 Ob having transmitted the 
first trap. Reading unit 790 reads the first trap from holding unit 780 based upon the 
read request of the first trap, and transmits data of the first trap to monitoring 
apparatus 1 50 by using global transmitting unit 220. Inverter 260 converts the 
management message destination IP address received by global receiving unit 250 
into the local IP address of terminal 110a or terminal 11 Ob having transmitted the first 
trap. Local transmitting unit 270 transmits the management message converted by 
inverter 260, via LAN 1 20a, to terminal 1 1 0a or terminal 1 1 Ob having transmitted the 
first trap. 

Address conversion apparatus 130a may use the GET REQUEST message based on 
SNMP as the aforementioned read request message. Further, address conversion 
apparatus 1 30a may use the SET REQUEST message or the GET REQUEST message 
based on SNMP as the aforementioned management message. 

[0089] 

Monitoring apparatus 1 50 of the present embodiment has the same constitution 
as the first embodiment. Global receiving unit 300 in monitoring apparatus 1 50 
receives the second trap, which is a changed trap transmitted by address conversion 
apparatus 1 30a or 1 30b. Specifying unit 310 analyzes the second trap received by 
global receiving unit 300 and specifies the address conversion apparatus having 
transmitted the second trap as one of address conversion apparatuses 1 30a to 1 30b. 
Trap processor 320 processes the second trap corresponding to the first trap. Trap 



[0087] 




[0088] 
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processor 320 generates the request to read the first trap for the address conversion 
apparatus having transmitted the second trap and transmits the generated request via 
global transmitting unit 330. Trap processor 320 notifies a user who uses monitoring 
apparatus 1 50 of a content of the read first trap, updates information with respect to 
the status of each of terminals 1 1 Oa to 1 lOd stored in trap processor 320, or 
generates a management message to instruct an operation corresponding to the read 
first trap. Global transmitting unit 330 transmits the request to read the first trap or 
the management message generated by trap processor 320 to the address conversion 
apparatus of address conversion apparatuses 1 30a to 1 30b having transmitted the 
second trap. 

[0090] Monitoring apparatus 1 50 may use the GET REQUEST message based on SNMP as 
Q the aforementioned read request message. Further, monitoring apparatus 1 50 may 

|? use the SET REQUEST message or the GET REQUEST message based on SNMP as the 

CO aforementioned management message. 

u. 

[0091] Fig. 8 shows a trap transfer sequence of the second embodiment in the present 
invention, in the present embodiment, an exemplary case where terminal 1 1 0b 
transmits the first trap will be described. 

[0092] Terminal 1 1 0b transmits the first trap to monitoring apparatus 1 50 (S800). 

Address conversion apparatus 130a receives the first trap transmitted by terminal 
1 1 0b (S81 0). Holding unit 780 in address conversion apparatus 1 30a holds the 
received first trap (S820). Address conversion apparatus 1 30a transmits the second 
trap, generated by changing the first trap with converter 21 0, to monitoring apparatus 
1 50 (S830). The second trap is a trap having agent address part 435 of the first trap 
changed to "205.177.129.1". 

[0093] Monitoring apparatus 1 50 receives the second trap transmitted by address 

conversion apparatus 1 30a (S840). Monitoring apparatus 1 50 specifies that address 
conversion apparatus 1 30a transmitted the second trap based on agent address part 
435 of the second trap, and transmits the request to read the first trap to address 
conversion apparatus 1 30a (S850), 



few? 



[0094] 



Address conversion apparatus 1 30a receives the request to read the first trap 
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transmitted by monitoring apparatus 1 50 and returns data of the first trap held by 
holding unit 780 to monitoring apparatus 1 50 (S860). Monitoring apparatus 1 50 
specifies the communication apparatus having transmitted the first trap based on data 
of the first trap returned by address conversion apparatus 1 30a (S870). 

[0095] According to the present embodiment, converter 210 in address conversion 
apparatuses 1 30a to 1 30b converts the first trap into the second trap. Address 
conversion apparatuses 1 30a to 1 30b hold the first trap. Monitoring apparatus 1 50 
transmits the request to read the first trap by receiving the second trap and thereby 
can obtain the first trap. Thereby, monitoring apparatus 1 50 can specify the 
communication apparatus having transmitted the first trap. Further, since the second 
trap is also a trap and one part of the first trap is replaced, a change in packet length 
m is not necessary and the packet conversion processing can simply be realized. 

CP [0096] (Third embodiment)Fig. 9 shows components in address conversion apparatus 

pi 

Ui 130a of a third embodiment in the present invention. Address conversion apparatus 

^ 1 30a of the present embodiment includes local receiving unit 200, converter 210, 

O global transmitting unit 220, global receiving unit 250, inverter 260, local 

transmitting unit 270, holding unit 780, and address management unit 940. Local 
N u receiving unit 200 is one example of a receiving unit in address conversion apparatus 

1 30a of the present embodiment. Global transmitting unit 220 is one example of a 
M transmitting unit in address conversion apparatus 1 30a of the present embodiment. 

Local transmitting unit 270 is one example of a transfer unit in address conversion 

apparatus 130a of the present embodiment. 

[0097] Address management unit 940 manages one or more global IP address allocated 
to address conversion apparatus 1 30a and corresponds a content of agent address 
part 435 of the first trap received by address conversion apparatus 1 30a to a 
corresponding global IP address. Address management unit 940 has address 
conversion table 945 (note Fig. 10). Address conversion table 945 stores 
correspondence of a content in agent address part 435 of the first trap to the 
corresponding global IP address. 

[0098] |_ oca | rece jving unit 200 receives the first trap, which is an SNMP trap, from 

terminal 1 1 Oa to 11 Ob, which are communication apparatuses on LAN 1 20a. Holding 
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unit 780 holds the first trap received by local receiving unit 200. 

[0099] Converter 210 obtains a global IP address corresponding to the first trap from 

address management unit 940. Converter 210 changes agent address part 435 of the 
first trap to the global IP address obtained from address management unit 940 to 
generate the second trap. 

[0100] Global transmitting unit 220 transmits the second trap generated by converter 
210 to monitoring apparatus 1 50 on WAN 140. Global receiving unit 250 receives a 
management message transmitted by monitoring apparatus 1 50 to terminal 1 1 0a or 
1 1 0b having transmitted the first trap. Monitoring apparatus 1 50 transmits the 
management message to the destination based on agent address part 435 in the 
second trap. 

5;: [01 01] Inverter 260 converts the management message destination IP address received 
CO by global receiving unit 250 into the local IP address of terminal 11 0a or terminal 

|T 1 1 Ob having transmitted the first trap. Local transmitting unit 270 transmits the 

O management message converted by inverter 260, via LAN 1 20a, to terminal 1 1 0a or 

* terminal 1 1 0b having transmitted the first trap. Local transmitting unit 270 transmits 

H a packet of the management message in which the destination address is converted 

N a by inverter 260 to terminal 1 1 0a or terminal 1 1 0b having transmitted the first trap via 

jfei LAN 120a. 

[01 02] Address conversion apparatus 1 30a may use, for example, the SET REQUEST 
message or the GET REQUEST message based on SNMP as the aforementioned 
management message. 

[01 03] 

Address conversion apparatus 1 30a of the present embodiment allocates a global 
IP address corresponding to agent address part 435 of the first trap. Monitoring 
apparatus 1 50 transmits the management message to terminal 1 1 0a or 11 0b by using 
the global IP address allocated by address conversion apparatus 130a. Once address 
conversion apparatus 1 30a receives the management message from monitoring 
apparatus 150, address conversion apparatus 130a converts the destination global IP 
address into the corresponding local IP address of terminal 1 10a or 1 10b, by using 
address management unit 940, to transmit the converted management message to 
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terminal 11 Oa or 1 10b. 

[01 04] Address management unit 940 in address conversion apparatus 1 30a sets the 
status of an address used when global transmitting unit 220 transmits the second 
trap, to a status of "in use". When the status of all of the addresses managed by 
address management unit 940 is the status of "in use", converter 21 0 does not 
generate the second trap and waits for address management unit 940 to allocate an 
address. 

[01 05] Fig. 1 0 is one example of address conversion table 945 according to the third 

embodiment in the present invention. Address conversion table 945 according to the 
present embodiment has an IP address field, an agent address field, a status field, and 
a start of use field. 

[01 06] The IP address field holds the one or more global IP address allocated to address 
conversion apparatus 1 30a. The agent address field holds the local IP address of 
transmission source shown in agent address part 435 of the first trap received by 
address conversion apparatus 1 30a. The status field shows whether or not the 
corresponding global IP address is used. The start of use field shows a time when use 
of the corresponding global IP address is started. 

[01 07] For example, first line in Fig. 1 0 shows that the global IP address "205. 1 77.1 29.1 " 
is allocated to the first trap received from terminal 1 1 0b. Second line in Fig. 1 0 shows 
that the global IP address "205.1 77.1 29.2" is allocated to the first trap received from 
terminal 1 10a. Each of third and fourth lines in Fig. 10 shows that each of the global 
IP addresses "205.1 77.1 29.3" and "205.1 77.1 29.4" is not used. 

[01 08] Fig. 1 1 is a flowchart of a processing in address conversion apparatus 1 30a 
according to the third embodiment in the present invention. 

[01 09] First, address conversion apparatus 1 30a receives the first trap (SI 1 00). Next, 
address conversion apparatus 1 30a checks whether or not "no use" of the global IP 
addresses managed by address management unit 940 exists in the status field 
(SI 1 1 0). When "no use" of the global IP addresses does not exist in the status field, 
address conversion apparatus 1 30a awaits until status of any address becomes "no 
use" (SI 120). 
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[01 1 0] Address conversion apparatus 1 30a allocates the global IP addresses of "no use" 
to terminal 1 1 0a or 11 Ob shown in agent address part 435 of the first trap (SI 1 30). At 
this time, "in use" is shown in the status field of the corresponding global IP address 
in address conversion table 945 by address conversion apparatus 1 30a. Address 
conversion apparatus 1 30a changes agent address part 435 of the first trap to the 
allocated global IP address to generate the second trap, and transmits the trap to 
monitoring apparatus 1 50 (S1 1 40). 

[0111] Monitoring apparatus 1 50 transmits the management message to terminal 1 1 0a 
or terminal 1 1 0b having transmitted the first trap by using the global IP address 
shown in agent address part 435 of the second trap. Address conversion apparatus 
130a converts the destination address of management message received from 
monitoring apparatus 1 50 by using address management unit 940 and transfers the 
converted management message to terminal 1 10a or 1 10b having transmitted the 
first trap. 

[01 1 2] Address conversion apparatus 1 30a awaits until condition to release the global IP 
address managed by address management unit 940 is met (SI 1 50, SI 1 60). When 
condition to release the global IP address is met, address conversion apparatus 130a 
changes the corresponding status field in address conversion table 945 to "no use" 
and releases the global IP address (SI 1 70). 

[01 1 3] Conditions to release the global IP address in SI 1 50 can be realized in various 
manners. 

[01 1 4] After the management message is transmitted to terminal 1 1 0a or 1 1 0b 

corresponding to the first trap, monitoring apparatus 1 50 may transmit a message of 
trap processing completion information to inform completion of trap processing to 
address conversion apparatus 130a. In this case, address conversion apparatus 130a 
receives trap processing completion information from monitoring apparatus 1 50 and 
sets the status field showing status of the global IP address specified by this message 
to "no use". Address conversion apparatus 1 30a and monitoring apparatus 1 50 may 
use the SET REQUEST message or the GET REQUEST message based on SNMP as the 
aforementioned message of trap processing completion information. 
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[01 1 5] After the status field showing status of the global IP address is set to "in use", 

address conversion apparatus 1 30a detects passage of time specified previously and 
may set the status field of the global IP address to "no use". In this case, monitoring 
apparatus 1 50 transmits the management message to address conversion apparatus 
1 30a to make address conversion apparatus 1 30a process the transmitted message 
until address conversion apparatus 1 30a sets the status field of the global address to 
"no use". 

[01 16] When a specific message or combination of specific messages is received from 

monitoring apparatus 1 50, address conversion apparatus 1 30a may release the global 
IP address. 

[01 1 7] When a predetermined number of messages are received from monitoring 

apparatus 1 50, address conversion apparatus 1 30a may release the global IP address. 

[01 1 8] As described above, according to the present embodiment, address management 
unit 940 in address conversion apparatuses 1 30a to 1 30b allocates the global IP 
address to the first trap. Monitoring apparatus 1 50 can transmit the management 
message to terminals 11 0a to 1 1 0b by using the global IP address. Since the second 
trap is a trap, one part of the first trap is replaced, change of packet length is not 
necessary and the packet conversion processing can simplify be realized. 

[01 19] (Fourth embodiment)Fig. 12 shows one example of hardware components in 
address conversion apparatus 130a or monitoring apparatus 1 50 of a fourth 
embodiment in the present invention. A function of address conversion apparatus 
1 30a or monitoring apparatus 1 50 is realized by association of computer 1 200 
including CPU 1210, ROM 1220, RAM 1230, communication interface 1240, and hard 
disk drive 1250 with a program executed in computer 1200. Computer 1200 may 
further provide with floppy disk drive 1 260 and/or CD-ROM drive 1270. Address 
conversion table 945 in address conversion apparatus 1 30a is arranged in hard disk 
drive 12 50. 

[01 20] 

A program to realize address conversion apparatus 130a has a local receiving 
module, a conversion module, a global transmitting module, a global receiving 
module, an inversion module, a local transmitting module, a local transmitting 
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module, a holding module, a reading module, an address management module. These 
modules are programs to make computer 1200 operate as local receiving unit 200, 
converter 210, global transmitting unit 220, global receiving unit 250, inverter 260, 
local transmitting unit 270, holding unit 780, reading unit 790, and address 
management unit 940. 

[01 21] A program to realize monitoring apparatus 1 50 has the global receiving module, a 
specifying module, a trap processing module, a global transmitting module. These 
modules are programs to make computer 1200 operate as global receiving unit 300, 
specifying unit 310, trap processor 320, and global transmitting unit 330, 
respectively. 

[01 22] The aforementioned program or module may be stored in an external storage 

medium. As the storage medium, an optical recording medium such as a DVD or a PD, 
a magnetic recording medium such as a MD, a tape medium, and a semiconductor 
memory such as an IC card can be used other than floppy disk 1 280 and CD-ROM 
1 290. A storage device such as the hard disk or the RAM in a server system connected 
to a dedicated communication network or an Internet is used as a recording medium 
and the program may be provided in computer 1200 via a network. 

[01 23] Such recording medium is used only to realize address conversion apparatus 1 30a 
or monitoring apparatus 1 50 in computer 1 200 and it is obvious that manufacturing 
and sale etc. as business of the recording medium infringes the present patent right 
based on the present application. 

[01 24] Functions of programs in computer 1 200 may be realized by using a plurality of 
computers. In this case, various functions in address conversion apparatus 1 30a or 
monitoring apparatus 1 50 may be provided in any positions in the plurality of 
computers. 

[01 25] With respect to a protocol as defined based on an SNMP in the future, a protocol 
can be applied to the present invention if the protocol is based on a basic protocol of 
the SNMP. 

[01 26] According to the present invention, it is possible to simplify a packet converting 
processing of a trap in an address conversion apparatus for relaying the trap 
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transmitted by a communication apparatus to transfer to a management apparatus. 

[01 27] Although the present invention has been described by way of exemplary 

embodiments, it should be understood that many changes and substitutions may be 
made by those skilled in the art without departing from the spirit and the scope of the 
present invention which is defined only by the appended claims. 
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